Use the nonroot base image

Don't hang when cert request gets deleted

Update base debian:10.1-slim -> bullseye-20200224-slim

Includes security updates for:

openssl
libssl1.1
libidn2.0

include unqualified .svc domain

Run as a non-root user

run 'dep ensure' -- Upgrade kapprover to 0.7.0

Remove misleading comment

Rename command-line options

Reorder flags